X-Road v7.2.0 Release Notes

Release Info

Version number7.2.0
Release date13.12.2022
Supported versions
  • 7.2.0
  • 7.1.1
  • 7.0.4
Supported platforms

Central Server

  • Ubuntu 20.04 LTS
  • Ubuntu 22.04 LTS

Configuration Proxy

  • Ubuntu 20.04 LTS
  • Ubuntu 22.04 LTS

Security Server

  • Ubuntu 20.04 LTS
  • Ubuntu 22.04 LTS
  • RHEL 7
  • RHEL 8
  • Docker
Official documentationhttps://github.com/nordic-institute/X-Road/tree/master/doc
Source codehttps://github.com/nordic-institute/X-Road/tree/master
Software licenseMIT
On this page:

Changes in This Release

Summary

  • Support for Ubuntu 22.04 LTS.

    • Central Server, Security Server and Configuration Proxy can be migrated from Ubuntu 20.04 LTS to the latest Ubuntu 22.04 LTS version.

    • Ubuntu 22.04 LTS support includes installation packages, and instructions for fresh install and migration from Ubuntu 20.

  • Remove support for Ubuntu 18.04 LTS.

    • Ubuntu 18.04 versions of previous releases (v7.0.4, v7.1.1) are supported until the end of the release's official support period.

  • Experimental support for ARM64 processor architecture.

    • Publish a snapshot version of X-Road ARM64 packages that can be used for testing purposes.

  • Support for transferring data to object storages, e.g., AWS S3.

  • Minor enhancements and bug fixes based on user feedback.

Completed Issues

Issue IDTypeSummary
XRDDEV-2022Improvement

Add content-length HTTP header calculated based on the actual content on the producer side Security Server. This makes it possible for the receiving side information system to check the content length using the header and allows for uploading data to object storages, e.g., AWS S3.

Before the change, the producer side Security Server added the "Transfer-Encoding: chunked" HTTP header to the request sent to the receiving side information system. Instead, after the change the "Content-Length" header is added.

XRDDEV-2041Improvement

Update the operational monitoring Security Server add-on to store the "X-Road-Represented-Party" HTTP header from REST message exchange. Before the fix, the header was stored from SOAP message exchange only.

The format of the "X-Road-Represented-Party" HTTP header value is defined in the Third Party Representation Extension for the X-Road Message Protocol document.

XRDDEV-2097Fix

Fix an issue on the Security Server that caused re-importing a configuration anchor to fail with the error “Configuration anchor import failed: invalid anchor file”.

XRDDEV-2098New

Remove support for Ubuntu 18.04 LTS.

Ubuntu 18.04 LTS versions of previous releases (v7.0.4, v7.1.1) are supported until the end of the release's official support period.

XRDDEV-2100NewAdd support for Ubuntu 22.04 LTS in Security Server packages.
XRDDEV-2101NewAdd support for Ubuntu 22.04 LTS in Central Server packages.
XRDDEV-2102NewAdd support for Ubuntu 22.04 LTS in Configuration Proxy packages.
XRDDEV-2107New

Document the Central Server upgrade process from Ubuntu 20.04 LTS to Ubuntu 22.04 LTS. The documentation can be found here:

XRDDEV-2108New

Document the Configuration Proxy upgrade process from Ubuntu 20.04 LTS to Ubuntu 22.04 LTS. The documentation can be found here:

XRDDEV-2109New

Document the Security Server upgrade process from Ubuntu 20.04 LTS to Ubuntu 22.04 LTS. The documentation can be found here:

XRDDEV-2110New

Document the Security Server cluster upgrade process from Ubuntu 20.04 LTS to Ubuntu 22.04 LTS. The documentation can be found here:

XRDDEV-2111ImprovementDocumentation for setting up a Security Server cluster is updated for Ubuntu 22.04 LTS.
XRDDEV-2112FixFix an issue where removing access from one version of a SOAP service would remove access to other versions of the service as well.
XRDDEV-2114FixFix issues with the X-Road Security Server Sidecar that caused database migrations to fail. Improve the documentation to make the version upgrade steps clearer.
XRDDEV-2116Fix

Fix an issue where users could not log into the token on a secondary node of a Security Server cluster due to it being read-only.

In X-Road versions before 7.2.0 (<7.2.0), the secondary node UI user had to be a member of only one UI privilege group: "xroad-securityserver-observer". Instead, starting from version 7.2.0 (>=7.2.0), the secondary node UI user has to be a member of two UI privilege groups: "xroad-securityserver-observer" and "xroad-security-officer".

After upgrading to version 7.2.0, the secondary node UI user must be added to the "xroad-security-officer" privilege group manually by the Security Server administrator.

More information about managing the Security Server UI users is available here.

XRDDEV-2117Fix

Fix an issue with downloading the verification package using the Security Server’s "/verificationconf" interface. The verification package is required by the "asicverifier.jar" utility that's used for message log archive verfication.

XRDDEV-2127ImprovementAdd documentation about the Third Party Representation Extension for the X-Road Message Protocol in the X-Road source code repository.
XRDDEV-2131Fix

Fix an issue with adding sign keys to a HSM in a clustered Security Server setup. The issue required the secondary Security Server nodes to be restarted before they were able to see the new key. After the fix, the secondary Security Server nodes are able to see the new key without a restart.

XRDDEV-2132Improvement

Estonian national settings: Update default authentication and signing key length to 3072 bits (earlier 2048 bits).

XRDDEV-2160Fix

Marked the old "SkEsteIdCertificateProfileInfoProvider" as deprecated since the related profile is no longer used.

Please contact NIIS (x-road@niis.org) in case you are still using this profile. Unless NIIS receives further feedback on this deprecation, the profile will be completely removed in a future version.

XRDDEV-2161FixFix an issue with automatic backup generation that caused the automatic backup generation not to work in the X-Road Security Server Sidecar image.
XRDDEV-2167ImprovementIncrease the default maximum memory parameter (XROAD_MESSAGELOG_ARCHIVER_PARAMS) for the messagelog addon from 100mb to 200mb.

Issue types: fix (bug fix or technical debt), improvement (improvement to an existing feature), new (a new feature).

New/Updated Dependencies

DependencyOld VersionNew VersionNotes
rake13.0.313.0.6
tzinfo0.3.600.3.61
addressable2.4.02.8.0
concurrent-ruby1.1.81.1.10
thor1.1.01.2.1
apache-mime4j-core0.8.60.8.7
akka2.13:2.6.162.13:2.6.20
jackson2.13.32.13.4.20221013
spring-boot2.6.82.7.5
spring-cloud2021.0.12021.0.4

Contributors

The following developers have contributed to the development of this release version. A contribution means at least one Git commit that is included in the release. The full list of contributors of different X-Road® versions is available here.

Other Notes

Package Repositories

RepositoryURL
Bionic
deb https://artifactory.niis.org/xroad-release-deb bionic-<version> main
Focal
deb https://artifactory.niis.org/xroad-release-deb focal-<version> main
RPM / RHEL7
https://artifactory.niis.org/xroad-release-rpm/rhel/7/<version>
RPM / RHEL8
https://artifactory.niis.org/xroad-release-rpm/rhel/8/<version>
Dockerhttps://hub.docker.com/r/niis/xroad-security-server-sidecar

Repository Sign Key Details

Download URLhttps://artifactory.niis.org/api/gpg/key/public
Hash935CC5E7FA5397B171749F80D6E3973B
FingerprintA01B FE41 B9D8 EAF4 872F A3F1 FB0D 532C 10F6 EC5B
3rd party key serverUbuntu key server

Packages

Package

SHA256 checksum

xroad-addon-hwtokens_7.2.0-0.ubuntu20.04_amd64.deb

23a8de014ba6c9730c5510b61588dbe128e4b5b823a02d033db1e2a556a6c0ab

xroad-addon-messagelog_7.2.0-0.ubuntu20.04_all.deb

7aeb98f32cf57ca38692317500c784e9534bfdeaec62e56fd9150213dd2e95d9

xroad-addon-metaservices_7.2.0-0.ubuntu20.04_all.deb

e599969782af6cd81894f7a98431d824ee03f2a01326f98668bb5970ae0d36fe

xroad-addon-proxymonitor_7.2.0-0.ubuntu20.04_all.deb

cdcb5c391bb8fb58461d6647db87e52f7ecf63756d53eff3f2eda7a28ed50cce

xroad-addon-opmonitoring_7.2.0-0.ubuntu20.04_all.deb

346a47c7fea0774c603b136ab4e75052ab75a821f9621c68bdcbbe85bcbe6260

xroad-addon-wsdlvalidator_7.2.0-0.ubuntu20.04_all.deb

ff01f61c419ec8dcc745eade8d6e50eee2485474ba65f4dddbd7e6d9207bbfd6

xroad-autologin_7.2.0-0.ubuntu20.04_all.deb

859f3a5913f9eb64188212634b6913dabeafae28dbfae4767c71a3d585ebb854

xroad-base_7.2.0-0.ubuntu20.04_amd64.deb

00f9040ff1e5fb87fbd8425347d0fdbe100fc02590ff085394b408827e8dfa60

xroad-center_7.2.0-0.ubuntu20.04_all.deb

3a888a3028cc5dae663e93de52b6f3f0ba7bf26f4c657d4581ced7601dc7304b

xroad-centralserver_7.2.0-0.ubuntu20.04_all.deb

e5bde1b42da06e74760da2bb7b3107eb2f26bceefc235d773f89ce3a57c27e9c

xroad-centralserver-monitoring_7.2.0-0.ubuntu20.04_all.deb

13da7ffaa1b73c47252d27147c7ad6b622e577f1b9f79d8ea31f682a0693e609

xroad-confclient_7.2.0-0.ubuntu20.04_amd64.deb

bd4dc7e7512bd5a23f91c65dca5e7baa8cc1c950ac48fe7449d042afb953014f

xroad-confproxy_7.2.0-0.ubuntu20.04_all.deb

cbc4ff251489d8f3b1feb28e940c7e83fde9610dd16a5cbe05bb2ac3626916ea

xroad-database-local_7.2.0-0.ubuntu20.04_all.deb

063389b1d4aae4354302628c45a7c9a8e70136b80e86f074b51a3d71d2c0ca4b

xroad-database-remote_7.2.0-0.ubuntu20.04_all.deb

06193097880a55e819a48f7366775050f1c428a952a995951b6ba7be71cead75

xroad-jetty9_7.2.0-0.ubuntu20.04_all.deb

d221bcefec3284f1d13e834029b2090795a1d3394b68863c78e60106a82aadc6

xroad-monitor_7.2.0-0.ubuntu20.04_all.deb

c6a7d940f283653f404fb2c81f6381c877be8b3d66249836b15ff4f093f18db9

xroad-nginx_7.2.0-0.ubuntu20.04_amd64.deb

a6c899dda55adbc42782e9d1c66afa3ff952b5be0bf67221820a964f2dbfad56

xroad-opmonitor_7.2.0-0.ubuntu20.04_all.deb

0b3a68139b6b2d4bd0252b70e8f1dd93117c1b1e1d70828ebe0bbe07cf2c9504

xroad-proxy_7.2.0-0.ubuntu20.04_all.deb

4776b2c0d48da151b6239f15dca47b9c9869dd6f829d7b13b17290254b7e00fd

xroad-proxy-ui-api_7.2.0-0.ubuntu20.04_all.deb

bb31adde95c199db6b9a1b2e7beca0e2e897df45c8600756aa68ee0b26a3ee4b

xroad-securityserver_7.2.0-0.ubuntu20.04_all.deb

3c75436c7e1982dc43e033d3c02c886fefcbc2cde61d724e94dc8360bad70db9

xroad-securityserver-ee_7.2.0-0.ubuntu20.04_all.deb

aef9268f10c22f043859cc1d0e44d1f58c3934d14628179e075914d90ffb6afb

xroad-securityserver-fi_7.2.0-0.ubuntu20.04_all.deb

af70fb71450d7aeff276122515a32c11c8567217fe9101cc9df6318a647d71dc

xroad-securityserver-fo_7.2.0-0.ubuntu20.04_all.deb

d2a967dae8a01732ebbb81a63ea22def2aa59d21b468c6b6b21b3d40587f0fee

xroad-securityserver-is_7.2.0-0.ubuntu20.04_all.deb

e163f06ece8b7c34d4e6e37982d238d87cad09ef2611c63add56cbab14ee673d

xroad-signer_7.2.0-0.ubuntu20.04_amd64.deb

b796f00cdb893d7d74c524e79a676b849081b288722c0e9ea58e5c8c5d3d3190


Jammy

Package

SHA256 checksum

xroad-addon-hwtokens_7.2.0-0.ubuntu22.04_amd64.deb

6be3ab272e73350a60ffac0accbe3ef388df0e2a5a59475d4ae144ed17600f69

xroad-addon-messagelog_7.2.0-0.ubuntu22.04_all.deb

72dbc68c4bd784e5087667d51892e5ab5bfbbc38f475151237b87cb014eceace

xroad-addon-metaservices_7.2.0-0.ubuntu22.04_all.deb

a4e41dd42f9f73530074464b17ead9483962ebd0cc8d021ed1ede2d5b3c4264a

xroad-addon-opmonitoring_7.2.0-0.ubuntu22.04_all.deb

c0418677442bb8f7e2b06ebec1f5ac072cd88c7850730e078f13691e11f60653

xroad-addon-proxymonitor_7.2.0-0.ubuntu22.04_all.deb

ed55580f4e5a73fcf61d71449a74fd77164bfc54fccefec434844c00a98e485a

xroad-addon-wsdlvalidator_7.2.0-0.ubuntu22.04_all.deb

e8a1384a796193ce012e6fd70d0feece13dc4ac540c8f3c1b53686e5a3f00b45

xroad-autologin_7.2.0-0.ubuntu22.04_all.deb

21a1ea98adc37198a9f0fb6299962453e94e8f1223d041e2e6d7fd39aab9d10c

xroad-base_7.2.0-0.ubuntu22.04_amd64.deb

2595d335487932a0dd2fc5d5247ec16aed0b49f5ce10961e688425de54d8fbfe

xroad-center_7.2.0-0.ubuntu22.04_all.deb

049421351fc4b31724a507b45f1a29368ab909e7a14e8320ff8695f1e2c477ad

xroad-centralserver_7.2.0-0.ubuntu22.04_all.deb

66a843e0e1db285b09a03f72786d26fa3021bfc1a73068e8a6db8b683827d8f0

xroad-centralserver-monitoring_7.2.0-0.ubuntu22.04_all.deb

7b5fd90dbd0659d15e2347f3920faad327d8673d7848ec8a030160d6366e32e9

xroad-confclient_7.2.0-0.ubuntu22.04_amd64.deb

3a90ef571d0e412ec169a4d8e46401d67abb043009fc87fc8de6beedb2aa35da

xroad-confproxy_7.2.0-0.ubuntu22.04_all.deb

ab97d04f7a8a8d35c9f81d8cd338d90bc2dd2a1977ae141651b86dddaa9edd98

xroad-database-local_7.2.0-0.ubuntu22.04_all.deb

989209074419bfe3ab26aae495a46ca7c818e1ecce55c3d07ccfb9146ba91a8b

xroad-database-remote_7.2.0-0.ubuntu22.04_all.deb

0a4beeb980c75f2bd6d65240098fe2a77f3527840e5a74dbc942aa04832a64b5

xroad-jetty9_7.2.0-0.ubuntu22.04_all.deb

4a786c1f2cdb54cac710098bdce2d06df129b63c10bb5db337a9286c33edb287

xroad-monitor_7.2.0-0.ubuntu22.04_all.deb

09fb5e4ad3f8380c51c76b21d0198740656817d39b94985699b028cecf9d5d00

xroad-nginx_7.2.0-0.ubuntu22.04_amd64.deb

ef00a4e7253938dee4f8b1a145c72a0c66eadb3155fc0fd05d908c8af88aeeba

xroad-opmonitor_7.2.0-0.ubuntu22.04_all.deb

78384f56e4d634096075c21da8a14ebb0befc18fba03ef35e6c556c408aeeb36

xroad-proxy_7.2.0-0.ubuntu22.04_all.deb

5546d6ad92d20fda412ef42051c025e90a2dae9c20c23728d1f3780bad167149

xroad-proxy-ui-api_7.2.0-0.ubuntu22.04_all.deb

2f6ecd7759c9c369a7d16b9e8c5cec131a51fcc599bc8c8f95ae5100196149b1

xroad-securityserver_7.2.0-0.ubuntu22.04_all.deb

363335d20743bdc72d9a1d4a1e24b74f246c55d59c31739f9b8c2ffa661cb1d7

xroad-securityserver-ee_7.2.0-0.ubuntu22.04_all.deb

7f2c10855fb1d95679b64b224ddea66c69c9145b7aa98da1428c0bd9893fbfe2

xroad-securityserver-fi_7.2.0-0.ubuntu22.04_all.deb

6e23fa145e127e3f9fa11dab2a79c47d61fbc77b60973f8602c5625526b36a36

xroad-securityserver-fo_7.2.0-0.ubuntu22.04_all.deb

109416529a87fd611fdc64c2317c6172cf883ce4548020bad5b79d9c2216771b

xroad-securityserver-is_7.2.0-0.ubuntu22.04_all.deb

1529dbf8418dff3cd16d708ac51a54641d6d2a02aa8950f19af4467a8fb014bf

xroad-signer_7.2.0-0.ubuntu22.04_amd64.deb

993bfc1644ea2418f92c3a6d954fb207ced255ed424c8f5cba8e90bf2340a36f


RPM / RHEL7

Package

SHA256 checksum

xroad-addon-messagelog-7.2.0-1.el7.x86_64.rpm

3fa61c985cda2f52cc55d716ca068aac1c70631e0979d7eb2cc68fe93935988f

xroad-addon-metaservices-7.2.0-1.el7.x86_64.rpm

98b783a7be94188011dcf60e5220744998355f3e39479aaa50505343450a2206

xroad-addon-opmonitoring-7.2.0-1.el7.x86_64.rpm

e6496a24443aac4dc072a4a910349381024a62de1453aece1a628127476c5fc2

xroad-addon-proxymonitor-7.2.0-1.el7.x86_64.rpm

78798ed7d4c2b3b1682e2cc5975c4b67be230a208a86f2aa9ccd8deae0456f43

xroad-addon-wsdlvalidator-7.2.0-1.el7.x86_64.rpm

448867330122288fd01ed11ec99f927b2335869101d373e43727e785c3a8ef13

xroad-autologin-7.2.0-1.el7.noarch.rpm

4a8283bc4caa42ed23f65772cd07cfa6ca0e0f110ecb0a367bcb19220f1a085b

xroad-base-7.2.0-1.el7.x86_64.rpm

a900c5552ecf533451d622aace5ae35d3c5c3a9df193a90b0d9dd2419a3741f0

xroad-confclient-7.2.0-1.el7.x86_64.rpm

160b57dc5ee3dae8745b83ba1575aaeaa2efef2212c6f8c7a826e49894615a51

xroad-database-local-7.2.0-1.el7.noarch.rpm

7b12df4a8720acb883d22bff91173457a2880ae787fb078e8e50967798edbed6

xroad-database-remote-7.2.0-1.el7.noarch.rpm

b1e0a56c66f12e8f97b20353fa83d3faea6eaf00b993f5c42305bb0e661318b9

xroad-monitor-7.2.0-1.el7.x86_64.rpm

60fee07f7acc5b2fba6adefef63825235c6c58d9fc71c1f9733d8760adcc3e03

xroad-nginx-7.2.0-1.el7.x86_64.rpm

9be38f376090ee44aca28a1e9cb2e6a77b2733d770669fb30943bf26c0deab6f

xroad-opmonitor-7.2.0-1.el7.x86_64.rpm

954f08fd6c9c16fe94f56cc51e1ff8dbea4799a436681804ff740211dc0eeea2

xroad-proxy-7.2.0-1.el7.x86_64.rpm

6deb1c6cef151e0f09f7fbac6f0071795c0792b22c6ba2c9d72cd971a33485f5

xroad-proxy-ui-api-7.2.0-1.el7.x86_64.rpm

bdb4cd664cd86f1f41736309ae5c477948ddf15647e06f02a974d3275c4aae43

xroad-securityserver-7.2.0-1.el7.noarch.rpm

448e85bb45e2f65879853a0e170ed0a7f50a9e2c0c8b115d821fcac4084fbfa7

xroad-securityserver-fi-7.2.0-1.el7.noarch.rpm

44bc5c0889ecb7662b4a0fb3262e09bd78f6f5632561785968bd796d79349e4e

xroad-securityserver-fo-7.2.0-1.el7.noarch.rpm

e6d8196668530fa1b1f38614c34d2d644de5f44e3850a2be6efc5dd6d4c2edec

xroad-securityserver-is-7.2.0-1.el7.noarch.rpm

d036799586c494a24a2884ebd19dafd7ba50dbdaffd0fd6b1a5312d9206e09a1

xroad-signer-7.2.0-1.el7.x86_64.rpm

caa385a056216e009a3be1195919544c70bfac5d132d4618c00dff60dabf309f


RPM / RHEL8

Package

SHA256 checksum

xroad-addon-messagelog-7.2.0-1.el8.x86_64.rpm

bb65025e26fc820ff272a7883b55fce3c70d888cb0b74a30e0134f591ba814c6

xroad-addon-metaservices-7.2.0-1.el8.x86_64.rpm

c716a9ffff9ec8164b713e0f197f160a0792334075edb0298cd177bddfc12f19

xroad-addon-opmonitoring-7.2.0-1.el8.x86_64.rpm

13f91c6a2f3f375bc0c9762f661d2f4e102db1e12ebbf5b07fb53603d84c72b6

xroad-addon-proxymonitor-7.2.0-1.el8.x86_64.rpm

e45933ab2edf8d9b62a12636a68a74b7d1e9f7540947c2256b3a87fee42c6f22

xroad-addon-wsdlvalidator-7.2.0-1.el8.x86_64.rpm

10163be30dc6c9590b02c3692494d8e944d634954e8f7ea2ab0f8fa72c3b9b0f

xroad-autologin-7.2.0-1.el8.noarch.rpm

b53a6d2c3851628369a7a0bddc77ad64038a0c04272e7369c96209d050793678

xroad-base-7.2.0-1.el8.x86_64.rpm

c28f3cf945fcc9080b602d35eeb51d34967c8f6cd9da343b332f5c14baa480df

xroad-confclient-7.2.0-1.el8.x86_64.rpm

c079cc63854747561d5666935cd6332fb17924b447e0a8e7c1aa9e565c315b6f

xroad-database-local-7.2.0-1.el8.noarch.rpm

c280cbace337ce9c24e23238b7ab49da278b4691dc34d3797d59e2272255ba0a

xroad-database-remote-7.2.0-1.el8.noarch.rpm

b596f0d6d33fb67c8bcbdc242f472aa9566b1d9f1df0fa09f83ffc083d533e8a

xroad-monitor-7.2.0-1.el8.x86_64.rpm

ea4d0d34d9162daf8e3674ae85e99d5f7ad34fd0ef187ff9b438cf2ceb73f870

xroad-nginx-7.2.0-1.el8.x86_64.rpm

d7ab0d4ee13262a4f84e68d3e5b95a429fcdefb54d3318e42e3506eba8eb2a3e

xroad-opmonitor-7.2.0-1.el8.x86_64.rpm

a958dbf394fd32567de9f35fc6a57ee5a11febce0b6ec27b754f59aa0c0c8eca

xroad-proxy-7.2.0-1.el8.x86_64.rpm

63e4f29c941a406bc1e4fd063ebe6a14ada203ee4b17bb1f9de24aaeaab39af8

xroad-proxy-ui-api-7.2.0-1.el8.x86_64.rpm

678d5e196ecff3723d96900d15f9369e25f2076779b1d9e37f2b58e731be573e

xroad-securityserver-7.2.0-1.el8.noarch.rpm

47db8ef261a9d6dc913b230bd4032bb0e82a3f6ab32b68599f4d68de6476bc56

xroad-securityserver-fi-7.2.0-1.el8.noarch.rpm

9a2242a1c9faba1876743a753d8ba2d8ddc25d312a73b628b1bca88045b2ce86

xroad-securityserver-fo-7.2.0-1.el8.noarch.rpm

8efaa1a590b382204df1e5bc431d7b5cf36ec8ca2ea4d5823fec0bb1f6485c65

xroad-securityserver-is-7.2.0-1.el8.noarch.rpm

d09b112a54772880581c3c924588dd7f1a6967e1cf186498a2a3a961ade3e68a

xroad-signer-7.2.0-1.el8.x86_64.rpm

cc13f6467f85c5230740b3f7a4e18cf0c15886d2e337e9d153e112b73e6f5ee5